This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/Gd0qEhznbnRm5zz3or9DoqKwy8Q.roa File: Gd0qEhznbnRm5zz3or9DoqKwy8Q.roa (raw, json) Hash identifier: bVT9DLS0tZiO8vtO74zYTRPqdZYiI50IXe67hgZXAOE= Subject key identifier: 19:DD:2A:12:1C:E7:6E:74:66:E7:3C:F7:A2:BF:43:A2:A2:B0:CB:C4 Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Certificate serial: 019B79EC9179320127A49B331F25DD06ABD4 Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/Gd0qEhznbnRm5zz3or9DoqKwy8Q.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 194.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:91:79:32:01:27:a4:9b:33:1f:25:dd:06:ab:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19dd2a121ce76e7466e73cf7a2bf43a2a2b0cbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:f6:0b:80:f6:06:19:36:4f:5e:cc:a1:f0: 93:15:bb:e1:9d:cb:8e:22:fa:18:43:7b:e6:10:8a: 88:70:d7:57:75:05:37:6d:17:da:ab:14:66:55:bb: 2b:83:3d:38:b5:e1:3a:79:e6:85:97:ae:59:ab:59: 8f:5d:76:9d:e8:62:7e:c1:f5:f9:df:26:d7:a2:74: 96:5d:a5:16:4f:be:f5:d7:0c:6b:27:d5:ef:3b:0d: 56:c6:95:6c:a4:fe:f0:6c:e2:1b:15:19:5c:3e:b8: 55:bc:a9:ff:d8:0a:0d:12:98:64:17:76:8b:6c:5f: 49:42:a2:12:3e:b2:28:de:ce:15:9c:f8:47:fd:f5: 48:31:8d:b4:67:65:a8:be:93:00:cf:76:db:a9:1c: e1:d4:03:81:56:7c:44:0b:37:e1:e9:14:5a:92:79: 2d:0b:fa:62:36:48:07:a6:68:07:68:12:36:c4:b8: 13:e6:86:be:ef:eb:3c:f8:d9:78:51:29:e5:6f:ef: e1:d2:cb:3d:6e:37:00:ab:a2:c0:a6:2a:ca:87:59: 97:32:a9:eb:0a:9b:fc:38:31:58:06:4d:fa:4e:74: 32:2e:aa:7f:8a:24:0d:39:78:cf:7e:fc:1d:69:8e: c4:3e:5b:e6:b9:f5:e5:6b:29:66:4b:d4:2b:86:b1: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DD:2A:12:1C:E7:6E:74:66:E7:3C:F7:A2:BF:43:A2:A2:B0:CB:C4 X509v3 Authority Key Identifier: keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/Gd0qEhznbnRm5zz3or9DoqKwy8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.127.0/24 Signature Algorithm: sha256WithRSAEncryption 53:06:31:73:0b:12:ca:98:0f:49:25:c0:b6:8e:33:07:a9:cc: 01:0e:da:e5:55:c4:59:27:66:b9:75:8c:ed:49:fa:12:69:92: 25:af:68:2e:f4:ee:4f:52:50:c6:60:5e:c8:b2:55:23:86:f0: ee:30:b2:78:f7:9b:31:4b:df:e8:ed:f0:c9:73:11:c7:78:5a: 63:58:02:01:d4:11:24:16:bf:81:5c:43:b1:c9:32:5b:2c:67: d2:39:cc:4f:dd:7e:e6:04:56:97:85:22:d8:6f:15:c1:c7:08: f8:36:bf:c7:da:7b:b9:36:19:36:a2:0e:48:27:36:74:0c:1e: ce:0f:3e:06:58:11:5e:cd:44:99:aa:57:21:14:9b:b3:9b:95: 93:76:57:d0:aa:60:08:56:1a:ba:59:2d:fd:a7:cd:f5:9f:11: a2:81:d6:15:83:0b:f9:c7:49:89:19:64:10:f4:ab:4e:91:10: fd:87:83:25:c5:1b:cf:dc:82:ec:73:56:5a:82:58:09:33:d6: 5f:83:29:9f:a0:bd:29:eb:08:cf:cc:e8:2e:c1:5d:2a:d7:e8: 1d:15:65:80:99:fe:0b:95:ac:a7:ea:73:b9:c2:40:6f:85:84: 6c:82:dc:ab:87:38:4d:b2:30:0b:a4:8d:98:df:2b:e6:cc:51: 99:3b:29:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57JF5MgEnpJszHyXdBqvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy MTY1ZWIwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWRkMmExMjFjZTc2ZTc0NjZlNzNjZjdhMmJmNDNhMmEyYjBjYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfz2C4D2Bhk2T17MofCTFbvhncuO IvoYQ3vmEIqIcNdXdQU3bRfaqxRmVbsrgz04teE6eeaFl65Zq1mPXXad6GJ+wfX5 3ybXonSWXaUWT7711wxrJ9XvOw1WxpVspP7wbOIbFRlcPrhVvKn/2AoNEphkF3aL bF9JQqISPrIo3s4VnPhH/fVIMY20Z2WovpMAz3bbqRzh1AOBVnxECzfh6RRaknkt C/piNkgHpmgHaBI2xLgT5oa+7+s8+Nl4USnlb+/h0ss9bjcAq6LApirKh1mXMqnr Cpv8ODFYBk36TnQyLqp/iiQNOXjPfvwdaY7EPlvmufXlaylmS9QrhrEdnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBndKhIc5250Zuc896K/Q6KisMvEMB8GA1UdIwQY MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt OTQwYWU0NTRjYjg1LzEvR2QwcUVoem5iblJtNXp6M29yOURvcUt3eThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1 LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvJ/MA0G CSqGSIb3DQEBCwUAA4IBAQBTBjFzCxLKmA9JJcC2jjMHqcwBDtrlVcRZJ2a5dYzt SfoSaZIlr2gu9O5PUlDGYF7IslUjhvDuMLJ495sxS9/o7fDJcxHHeFpjWAIB1BEk Fr+BXEOxyTJbLGfSOcxP3X7mBFaXhSLYbxXBxwj4Nr/H2nu5Nhk2og5IJzZ0DB7O Dz4GWBFezUSZqlchFJuzm5WTdlfQqmAIVhq6WS39p831nxGigdYVgwv5x0mJGWQQ 9KtOkRD9h4MlxRvP3ILsc1ZaglgJM9ZfgymfoL0p6wjPzOguwV0q1+gdFWWAmf4L layn6nO5wkBvhYRsgtyrhzhNsjALpI2Y3yvmzFGZOylP -----END CERTIFICATE-----Generated at Fri Jan 9 12:03:07 2026 by rpki-client